tree 559c73981e710b9b1086339c2d495e7e562a5d3d
parent dcd7fc6f69a4f2104cbe0c3eae01b305eb2e654b
author Yoshifumi Inoue <yosin@chromium.org> 1558349094 +0000
committer Commit Bot <commit-bot@chromium.org> 1558349094 +0000

Make Element#innerText to use CHECK at StringView construction

This patch converts use-after-tree to CHECK() by changing Element#innerText
to cause CEHCK() instead of DCHECK in StringView constructor to avoid
use-after-tree.

Note: We are not sure of root causes both use-after-free tree and wrong
StringView constructor call.

Bug: 964464
Change-Id: If4d289c8f6fe4072c1869553cd952d0c153a3369
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1619510
Reviewed-by: Yoshifumi Inoue <yosin@chromium.org>
Reviewed-by: Koji Ishii <kojii@chromium.org>
Commit-Queue: Koji Ishii <kojii@chromium.org>
Auto-Submit: Yoshifumi Inoue <yosin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#661314}